Ubuntu 18.04.2 LTS Released

I for one would very much like to see this bug in 18.04 fixed as a priority:<p><a href="https:&#x2F;&#x2F;bugs.launchpad.net&#x2F;ubuntu&#x2F;+source&#x2F;openjdk-lts&#x2F;+bug&#x2F;1796027" rel="nofollow">https:&#x2F;&#x2F;bugs.launchpad.net&#x2F;ubuntu&#x2F;+source&#x2F;openjdk-lts&#x2F;+bug&#x2F;1...</a><p>The Java 11 package installs Java 10. This was supposed to be a short term hack (because Ubuntu&#x27;s long term supported version 18.04 was being released shortly before Java&#x27;s long term supported version 11) but it&#x27;s been a good while now - six months or so.<p>The short term support version 18.10 of Ubuntu has Java 11 so it&#x27;s very non-obvious what the blocker is.<p>To me this seems like a really poor choice. The result of installing the Java 11 package but getting Java 10 <i>clearly</i> fails the principle of least astonishment. If we can live without the fix a quarter of the way to the next LTS edition of Ubuntu then we could have lived with Java 10 as the preferred (and correctly named) package in the first place.<p>Meanwhile the bug asks us not to spam with requests for updates yet there&#x27;s no suggestion of where we can go to gauge what the timescales we&#x27;re up against are.<p>It definitely dents my confidence in Ubuntu as a well organised distribution.

This is not an official announcement and it has not been officially declared released or ISOs updated.<p>The last official comment was it was delayed till Thursday, Feb. 14:<p><a href="https:&#x2F;&#x2F;lists.ubuntu.com&#x2F;archives&#x2F;ubuntu-release&#x2F;2019-February&#x2F;004694.html" rel="nofollow">https:&#x2F;&#x2F;lists.ubuntu.com&#x2F;archives&#x2F;ubuntu-release&#x2F;2019-Februa...</a><p>Those preparing the release will update release notes and fixed bug lists (like this one) before the release.

I wish there was some announcement about when HWE kernels will be available for 18.04. This page has not yet been updated.<p><a href="https:&#x2F;&#x2F;wiki.ubuntu.com&#x2F;Kernel&#x2F;RollingLTSEnablementStack#Kernel.2FSupport-1.A18.04.x_Ubuntu_Kernel_Support" rel="nofollow">https:&#x2F;&#x2F;wiki.ubuntu.com&#x2F;Kernel&#x2F;RollingLTSEnablementStack#Ker...</a>

Apparently 18.04.2 LTS has been released, as that&#x27;s what my box reports running now. I don&#x27;t see any clear announcements of the actual release, but perhaps they&#x27;re just hard to find on the various ubuntu wiki&#x2F;planet&#x2F;mailing list&#x2F;etc... sites.

Does it include the fix for apt&#x27;s recent mirror redirect vulnerability? If not, any update to a fresh system would be trivially susceptible to a MITM attack if redirects aren&#x27;t disabled. This includes docker images as well: <a href="https:&#x2F;&#x2F;justi.cz&#x2F;security&#x2F;2019&#x2F;01&#x2F;22&#x2F;apt-rce.html" rel="nofollow">https:&#x2F;&#x2F;justi.cz&#x2F;security&#x2F;2019&#x2F;01&#x2F;22&#x2F;apt-rce.html</a><p>Canonical really should enable https as an additional layer of protection. This isn&#x27;t the first time a bug in apt&#x27;s authentication was found and it&#x27;s unlikely that this bug will be the last.